Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File:                     rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier:          nIVzla/D3iWqIUiuWer+BEBS3qIO0GQJUjWLx34v158=
Subject key identifier:   A5:8A:10:23:6E:05:7A:50:E3:D9:12:8D:3E:43:1E:91:6A:83:67:B0
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer:       /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial:       018F87ED3E461527A644AA3DC2CDECE6F0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:23 +0000
Manifest this update:     Fri 17 May 2024 19:00:23 +0000
Manifest next update:     Sat 18 May 2024 19:00:23 +0000
Files and hashes:         1: d16u2xRq_X5hZCERB1e61dcDSoc.roa (hash: BxsLs0/S23vVdEl1K1TW3kMiEXM7uR7fwRQuXoxvYiM=)
                          2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: GcWUWw6QhPlex3bFDw71q20t9LKYUnb0nZHD5LxlZLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3e:46:15:27:a6:44:aa:3d:c2:cd:ec:e6:f0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
        Validity
            Not Before: May 17 19:00:23 2024 GMT
            Not After : May 18 19:00:23 2024 GMT
        Subject: CN=a58a10236e057a50e3d9128d3e431e916a8367b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:7a:81:87:a1:56:b2:a0:3c:67:a9:81:4b:
                    5f:2d:7c:c1:b3:26:06:da:c8:69:90:1b:83:55:bb:
                    a8:c7:5b:df:24:78:38:5a:6c:ea:95:32:7b:8e:cb:
                    ee:1d:7a:7b:84:55:3a:30:15:ba:e7:f0:a6:bf:b6:
                    91:34:f3:aa:e0:80:43:64:0f:1c:87:ef:47:2a:8a:
                    4f:a3:92:b3:5a:18:70:a9:65:9f:78:55:f9:7a:80:
                    48:a0:b0:44:f1:86:9c:47:d8:13:4a:e0:31:62:2f:
                    e3:33:fe:fd:97:b7:89:84:64:70:bd:3d:bc:e2:e4:
                    bf:3b:0c:32:98:20:bf:66:bd:27:fd:a0:02:00:2a:
                    b3:5d:f4:32:bf:91:49:7f:2a:b6:24:7c:72:13:26:
                    4e:e0:4d:92:04:f9:46:ee:d6:59:3a:0f:31:3a:6d:
                    f5:c9:94:72:ac:6e:af:94:18:74:e7:fc:5b:cb:0a:
                    88:ca:31:98:67:45:52:d7:99:09:a0:55:1b:0e:fe:
                    10:86:ea:1a:69:36:b4:92:4b:be:9f:8b:1f:80:18:
                    32:3c:af:c3:a9:ff:3d:96:4d:32:87:ae:5d:8a:4d:
                    f6:14:99:34:73:a7:14:56:29:b5:4e:b9:1b:12:09:
                    2e:79:09:90:06:51:f1:91:3f:ce:ae:4f:20:43:c6:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8A:10:23:6E:05:7A:50:E3:D9:12:8D:3E:43:1E:91:6A:83:67:B0
            X509v3 Authority Key Identifier:
                keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:09:22:82:32:05:ab:f3:e5:3c:e6:63:07:d1:64:f1:a3:
         88:cf:c7:de:a4:99:3e:31:61:06:76:b1:1a:e7:d6:56:9d:fe:
         64:c9:f9:aa:0d:b2:b2:73:84:05:59:28:f8:40:97:5d:93:46:
         92:0c:f6:e9:ae:ab:03:5b:ca:96:86:47:61:91:11:54:6a:5e:
         63:0d:c1:11:91:af:b7:f1:26:e0:e5:9a:21:1f:e1:83:51:79:
         ed:8d:9f:a7:2e:89:b3:71:df:2a:1b:5f:29:5b:74:ff:83:83:
         05:07:9a:69:ee:06:23:b3:30:06:c5:20:30:2d:05:e1:94:1f:
         c1:d3:35:76:be:38:18:4e:c3:63:d1:5d:9c:07:c5:b2:d1:53:
         e1:27:4c:ed:23:03:46:75:71:27:11:76:cb:74:0a:21:23:e5:
         fe:fd:f2:9d:6f:33:4e:ca:5d:7c:c7:d7:07:03:3e:b2:f2:9d:
         8f:9a:fc:bc:27:0e:cb:c0:66:49:02:83:ad:b0:97:59:09:53:
         d4:a3:3c:b2:ff:f0:ae:30:51:26:73:fa:ae:c6:23:f0:a2:dc:
         3d:01:0d:52:7b:61:92:c4:76:7c:5a:9e:25:6c:34:b5:bc:16:
         75:c8:f3:de:7a:27:5b:cc:6f:52:90:a6:91:89:ae:6c:42:b3:
         f3:2d:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:29:45 2024 by rpki-client on console-ams.rpki-client.org